What Le Tool does with your data, and how it protects it

1. What the service does

Le Tool brings a reseller's purchases, inventory and sales into a single interface. It reads the orders placed on the marketplaces you connect it to, derives stock levels and margins from them, and helps you publish listings.

The tool is for professional use. It is not aimed at consumers and handles no buyer data beyond what marketplaces pass to the seller in order to fulfil an order.

2. Accounts you connect

Nothing is read until you connect an account, and every connection goes through the provider's own authorisation flow — you enter your credentials on their site, never on ours.

• Amazon Business: orders, shipments and invoices, through the Reporting, Reconciliation and Document APIs.
• Amazon Seller (SP-API): catalogue and listings for the selling account.
• eBay: listings, orders, fees and notifications, through the official APIs.
• Mailboxes (IMAP or Microsoft Graph): reading order confirmation emails, for retailers with no API.
• Carriers: parcel tracking from the numbers carried by your orders.

3. You stay in control

An authorisation you grant can be withdrawn. You can disconnect an account from Le Tool's settings, which deletes the associated tokens immediately, or revoke it directly at the provider — Amazon, eBay and Microsoft all expose that revocation in their own interface. Either way access stops at once.

Deleting your Le Tool account erases your purchases, sales, stock and connections. That operation cannot be undone and leaves no copy behind.

4. Security

The measures below are in place today, not planned:

• Passwords hashed with bcrypt (cost factor 12). They are never stored in clear text and cannot be read back, by us included.
• OAuth tokens, mailbox passwords and session cookies encrypted at rest with AES-256-CBC, using a randomly generated initialisation vector for every record.
• Separate encryption keys per domain (Amazon, eBay, mail): compromising one does not open the others.
• All traffic over HTTPS, with Let's Encrypt certificates renewed automatically.
• Sessions carried by a signed, time-limited token rather than a guessable identifier.
• Per-account isolation: every read and every write carries the signed-in account's identifier. Two customers never see each other's data.

5. Where the data lives

Data is hosted on a server located in the European Union (Hetzner, Finland) and does not leave that server, apart from outbound calls to the APIs of the marketplaces you have connected.

No data is sold, rented or passed to a third party for advertising or analytics purposes. There is no ad network, no resale of market data, and no cross-site tracking.

6. What is kept, and for how long

Le Tool keeps what it takes to hold an accurate stock figure: order lines, quantities, prices, tracking numbers, purchase invoices. Emails read to reconstruct an order are not stored in full — only the order details are extracted from them.

Data stays for as long as your account exists, because stock is reasoned about across several financial years. It is removed when the account is deleted, or earlier on request.

7. Your rights

Under the GDPR you have the right to access, rectify, erase, port and object to the processing of data concerning you. Requests go to the contact address below and are answered within thirty days.

Exporting your data as a spreadsheet is also available on your own, from every screen of the tool.

8. Marketplaces and API providers

The Amazon and eBay integrations are built on the APIs those providers publish and on their OAuth authorisation flow. Le Tool requests only the scopes needed for the features described above, and asks for them explicitly at connection time.

Data obtained from a provider is used solely to deliver the service to the holder of the connected account. It is neither aggregated across customers, nor resold, nor used to train a model.

Le Tool is an independent tool. It is not published, sponsored or endorsed by Amazon or eBay, and the trademarks named here belong to their respective owners.

9. Availability and liability

Le Tool is provided as is, with no guarantee of uninterrupted service. A marketplace may change its API, restrict access or go down: the figures shown depend on what it returns.

The figures displayed are a decision aid, not an accounting record. The purchase invoices downloaded from the tool are what counts, not the totals computed alongside them.

10. Publisher

Le Tool is published by LE TOOL, a company currently being formed. The full legal notices — legal form, share capital, registration number and registered office — will be published on this page as soon as the company is registered.

Hosting: Hetzner Online GmbH, Industriestr. 25, 91710 Gunzenhausen, Germany — servers located in Finland.

Questions and reports

Any question about this page, any access or deletion request, and any vulnerability report goes to the address below. A security report is answered before anything else.